🇷🇺 Russia: live cyber threat activity

Malicious IPs, malware and ransomware victims in Russia.

3,582Malicious IPs listed#5 of 182 countries · 5.42% of the world
241New in the last 24hfirst seen by any feed
221Reported by 2+ feedsindependent sources agree
6Ransomware victimsposted in the last 30 days

View Russia on the live map →All listed IPs in RussiaRansomware victims in Russia

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

  1. C278
  2. Malware434
  3. Phishing0
  4. Attacker3,070

By state or region

  1. Chuvash Republic2,050
  2. St.-Petersburg648
  3. Moscow415
  4. Moscow Oblast63
  5. Sverdlovsk Oblast33
  6. Novosibirsk Oblast26
  7. Krasnodar Krai26
  8. Rostov24
  9. Nizhny Novgorod Oblast18
  10. Tatarstan Republic18
  11. Karachayevo-Cherkesiya Republic18
  12. Bryansk Oblast16
  13. Chelyabinsk15
  14. Samara Oblast13
  15. Omsk Oblast13

By city

  1. Cheboksary2,051
  2. St Petersburg643
  3. Moscow409
  4. Yekaterinburg41
  5. Novosibirsk25
  6. Rostov-on-Don20
  7. Kolomna19
  8. Cherkessk18
  9. Krasnodar17
  10. Bryansk13
  11. Kazan’13
  12. Omsk11
  13. Samara10
  14. Nizhny Novgorod10
  15. Khimki9

Networks hosting the most

NetworkIPs
AS57026 JSC "ER-Telecom Holding" 2,050
AS34665 Petersburg Internet Network ltd. 516
AS12389 PJSC Rostelecom 96
AS25159 PJSC MegaFon 42
AS48282 Hosting technology LTD 29
AS12714 PJSC MegaFon 25
AS17561 Larus Limited 20
AS39493 CJSC Kolomna-Sviaz TV 19
AS29182 JSC IOT 18
AS52008 NesterTelecom LLC 18
AS3216 PJSC "Vimpelcom" 17
AS8359 MTS PJSC 17
AS49505 JSC Selectel 16
AS200593 PROSPERO OOO 16
AS9123 JSC "TIMEWEB" 15

Malware families served from Russia

  1. DanaBot20
  2. Dcrat14
  3. AdaptixC214
  4. Dacic14
  5. Scar13
  6. Amadey11
  7. Brresmon10
  8. Maze10
  9. Loki9
  10. Privateloader9
  11. Zard8
  12. Crifi7
  13. Gandcrab6
  14. Themida6
  15. Cobalt Strike6

Most recently reported

IPRoleFamily / threatWhereNetworkReported byLast reported (UTC)
176.192.201[.]80AttackerAttacking hostMoscow, MoscowAS12714 PJSC MegaFon1 feed2026-10-12 08:20
185.87.194[.]145AttackerAttacking hostMoscow, MoscowAS210079 EuroByte LLC1 feed2026-10-12 08:20
193.233.255[.]73MalwareCrifiShergino, Buryatiya RepublicAS219202 NEUROSIGNAL LLC1 feed · 1,102 sandbox samples2026-10-12 07:53
195.2.74[.]10MalwareDacicMoscow, MoscowAS48282 Hosting technology LTD1 feed · 110 sandbox samples2026-10-12 07:53
5.42.65[.]80MalwareMokesKolomna, Moscow OblastAS39493 CJSC Kolomna-Sviaz TV1 feed · 690 sandbox samples2026-10-12 07:53
5.42.92[.]190MalwareZardKolomna, Moscow OblastAS39493 CJSC Kolomna-Sviaz TV1 feed · 147 sandbox samples2026-10-12 07:53
5.42.92[.]51MalwareContacted by malwareKolomna, Moscow OblastAS39493 CJSC Kolomna-Sviaz TV1 feed · 101 sandbox samples2026-10-12 07:53
5.42.92[.]93MalwareZardKolomna, Moscow OblastAS39493 CJSC Kolomna-Sviaz TV1 feed · 96 sandbox samples2026-10-12 07:53
178.204.124[.]193AttackerAttacking hostKazan’, Tatarstan RepublicAS28840 PJSC "TATTELECOM"1 feed2026-10-12 07:50
185.114.245[.]170MalwareDcratSt Petersburg, St.-PetersburgAS9123 JSC "TIMEWEB"1 feed · 25 sandbox samples2026-10-12 07:26
185.7.214[.]210MalwareLokiMoscow, Moscow 1 feed · 447 sandbox samples2026-10-12 07:26
185.7.214[.]212MalwareLokiMoscow, Moscow 1 feed · 431 sandbox samples2026-10-12 07:26
185.7.214[.]51MalwareStopMoscow, Moscow 1 feed · 283 sandbox samples2026-10-12 07:26
45.15.157[.]136MalwareMokesRyazan, Ryazan OblastAS60042 OnTelecom LLC1 feed · 30 sandbox samples2026-10-12 07:26
80.66.75[.]11MalwareZardOmsk, Omsk Oblast 1 feed · 107 sandbox samples2026-10-12 07:26
91.227.16[.]22MalwareMokesSaratov, Saratov OblastAS207027 LLC Eximius1 feed · 16 sandbox samples2026-10-12 07:26
92.63.192[.]30MalwareLightstoneNovoivanovskoye, Moscow OblastAS29182 JSC IOT1 feed · 267 sandbox samples2026-10-12 07:26
94.26.228[.]204MalwareDacicSt Petersburg, St.-PetersburgAS49505 JSC Selectel1 feed · 171 sandbox samples2026-10-12 07:26
176.112.105[.]212AttackerAttacking hostBogorodsk, Nizhny Novgorod OblastAS198616 MediaKvant Ltd.1 feed2026-10-12 07:15
5.167.126[.]229MalwareMalicious IPRostov-on-Don, RostovAS57378 JSC "ER-Telecom Holding"1 feed2026-10-12 07:12
109.107.188[.]167MalwareKryptMoscow, MoscowAS216218 "DATA 1" LLC1 feed · 324 sandbox samples2026-10-12 06:58
141.8.192[.]58MalwareDcratSt Petersburg, St.-PetersburgAS35278 SPRINTHOST.RU LLC1 feed · 52 sandbox samples2026-10-12 06:58
141.8.192[.]93MalwareDcratSt Petersburg, St.-PetersburgAS35278 SPRINTHOST.RU LLC1 feed · 96 sandbox samples2026-10-12 06:58
5.101.152[.]161MalwareDcratSt Petersburg, St.-PetersburgAS198610 Beget LLC1 feed · 103 sandbox samples2026-10-12 06:58
5.182.39[.]146MalwareDacicSt Petersburg, St.-Petersburg 1 feed · 38 sandbox samples2026-10-12 06:58

See every listed IP in Russia →

Ransomware victims in Russia

6 posted in the last 30 days, 16 in 90.

Sectors hit (30 days)

Groups (30 days)

Posted (UTC)VictimGroupSector
2026-09-20 14:50TEK SPBAuditTeamTechnology
2026-09-18 15:50Paid Victim 192EB2B6AD7B98D9AuditTeam—
2026-09-16 18:22palletshopAuditTeamRetail & E-Commerce
2026-09-14 11:50Ne***oxAuditTeamTechnology
2026-09-13 09:51Paid Victim F9CF4B639CAC1B18AuditTeam—
2026-09-12 10:50TE***PBAuditTeam—
2026-09-10 19:20my***ruAuditTeamTechnology
2026-09-08 16:50bu***enAuditTeam—
2026-09-08 04:50pa***opAuditTeam—
2026-09-04 03:21mansurovogroupAuditTeamOther
2026-08-26 14:50Demidov Steel GroupAuditTeamManufacturing
2026-08-25 21:20ma***upAuditTeam—
2026-08-24 14:50Chernyy & AssociatesBooba ProjectProfessional Services
2026-08-18 02:50De***upAuditTeam—
2026-07-27 18:51vit-best.comchaosEducation

All ransomware victims in Russia →

Other countries

🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378🇵🇭 Philippines 351All countries →